@kitman-sh/loops 0.0.0-stage → 0.7.0

package/types/packages/core/src/proposal.d.ts

@@ -0,0 +1,292 @@
+import * as Schema from 'effect/Schema';
+export declare const ProposalStatuses: readonly ['proposed', 'in_review', 'approved', 'rejected', 'applied', 'reverted', 'superseded', 'canceled'];
+export declare const KitMarketplaceProposalTargetTypes: readonly ['kit_source', 'kit_version', 'kit_installation', 'kit_activation', 'kit_trust_policy'];
+export declare const KitMarketplaceProposalActions: readonly ['source_publish', 'version_publish', 'source_update', 'trust_change', 'visibility_change', 'broad_activation', 'risky_agent_environment_effect', 'rollback'];
+export declare const ProposalTargetTypes: readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"];
+export declare const ProposalRiskLevels: readonly ['low', 'medium', 'high'];
+export declare const ProposalApprovalPolicyModes: readonly ['auto_approve_low_risk', 'require_other_project_member', 'require_workspace_owner_or_admin'];
+export declare const ProposalPolicyViolationCodes: readonly ['autonomous_self_approval', 'self_capability_escalation', 'missing_required_approval', 'unsafe_payload', 'target_conflict'];
+export declare const ProposalStatus: Schema.Literals<readonly ["proposed", "in_review", "approved", "rejected", "applied", "reverted", "superseded", "canceled"]>;
+export declare const ProposalTargetType: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+export declare const ProposalRiskLevel: Schema.Literals<readonly ["low", "medium", "high"]>;
+export declare const ProposalCheckKind: Schema.Literals<readonly ["schema", "policy", "preflight", "conflict", "safety"]>;
+export declare const ProposalCheckStatus: Schema.Literals<readonly ["pending", "passed", "failed", "warning", "skipped"]>;
+export declare const ProposalApplicationAction: Schema.Literals<readonly ["applied", "rejected", "reverted"]>;
+export declare const ProposalSafeString: Schema.String;
+export declare const ProposalSafeMetadata: Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>;
+export declare const ProposalPayload: Schema.Struct<{
+    readonly memory: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly kit: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly kit_source: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly kit_version: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly kit_installation: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly kit_activation: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly kit_trust_policy: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly agent_environment_policy: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly decision: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly task: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly project_context: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly context_relevance: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+}>;
+export declare const ProposalTargetRef: Schema.Struct<{
+    readonly type: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+    readonly id: Schema.optionalKey<Schema.String>;
+    readonly scopeType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"workspace">, Schema.Literal<"project">, Schema.Literal<"task">, Schema.Literal<"kit">]>>;
+    readonly scopeId: Schema.optionalKey<Schema.String>;
+}>;
+export declare const ProposalApprovalPolicy: Schema.Struct<{
+    readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+    readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+    readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+    readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+}>;
+export declare const ProposalPolicyViolation: Schema.Struct<{
+    readonly code: Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>;
+    readonly severity: Schema.Literals<readonly ["warning", "blocking"]>;
+    readonly message: Schema.String;
+    readonly actorId: Schema.optionalKey<Schema.String>;
+    readonly target: Schema.optionalKey<Schema.Struct<{
+        readonly type: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+        readonly id: Schema.optionalKey<Schema.String>;
+        readonly scopeType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"workspace">, Schema.Literal<"project">, Schema.Literal<"task">, Schema.Literal<"kit">]>>;
+        readonly scopeId: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+}>;
+export declare const ProposalRenderedDiff: Schema.Struct<{
+    readonly format: Schema.Literals<readonly ["summary", "field_diff", "markdown"]>;
+    readonly title: Schema.String;
+    readonly summary: Schema.String;
+    readonly sections: Schema.$Array<Schema.Struct<{
+        readonly title: Schema.String;
+        readonly beforeSummary: Schema.optionalKey<Schema.String>;
+        readonly afterSummary: Schema.optionalKey<Schema.String>;
+        readonly risk: Schema.Literals<readonly ["low", "medium", "high"]>;
+    }>>;
+    readonly refs: Schema.$Array<Schema.Struct<{
+        readonly kind: Schema.Literals<readonly ["memory", "kit", "loop", "agent", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy", "session", "step_attempt", "change_request"]>;
+        readonly id: Schema.optionalKey<Schema.String>;
+        readonly externalId: Schema.optionalKey<Schema.String>;
+        readonly url: Schema.optionalKey<Schema.String>;
+        readonly title: Schema.optionalKey<Schema.String>;
+    }>>;
+}>;
+export declare const ProposalRiskSummary: Schema.Struct<{
+    readonly level: Schema.Literals<readonly ["low", "medium", "high"]>;
+    readonly summary: Schema.String;
+    readonly reasons: Schema.$Array<Schema.String>;
+}>;
+export declare const KitMarketplaceProposalReview: Schema.Struct<{
+    readonly action: Schema.Literals<readonly ["source_publish", "version_publish", "source_update", "trust_change", "visibility_change", "broad_activation", "risky_agent_environment_effect", "rollback"]>;
+    readonly target: Schema.Struct<{
+        readonly type: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+        readonly id: Schema.optionalKey<Schema.String>;
+        readonly scopeType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"workspace">, Schema.Literal<"project">, Schema.Literal<"task">, Schema.Literal<"kit">]>>;
+        readonly scopeId: Schema.optionalKey<Schema.String>;
+    }>;
+    readonly payload: Schema.Struct<{
+        readonly memory: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_source: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_version: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_installation: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_activation: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_trust_policy: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly agent_environment_policy: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly decision: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly task: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly project_context: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly context_relevance: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    }>;
+    readonly renderedDiff: Schema.Struct<{
+        readonly format: Schema.Literals<readonly ["summary", "field_diff", "markdown"]>;
+        readonly title: Schema.String;
+        readonly summary: Schema.String;
+        readonly sections: Schema.$Array<Schema.Struct<{
+            readonly title: Schema.String;
+            readonly beforeSummary: Schema.optionalKey<Schema.String>;
+            readonly afterSummary: Schema.optionalKey<Schema.String>;
+            readonly risk: Schema.Literals<readonly ["low", "medium", "high"]>;
+        }>>;
+        readonly refs: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["memory", "kit", "loop", "agent", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy", "session", "step_attempt", "change_request"]>;
+            readonly id: Schema.optionalKey<Schema.String>;
+            readonly externalId: Schema.optionalKey<Schema.String>;
+            readonly url: Schema.optionalKey<Schema.String>;
+            readonly title: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>;
+    readonly riskSummary: Schema.Struct<{
+        readonly level: Schema.Literals<readonly ["low", "medium", "high"]>;
+        readonly summary: Schema.String;
+        readonly reasons: Schema.$Array<Schema.String>;
+    }>;
+    readonly validationFindings: Schema.$Array<Schema.Struct<{
+        readonly code: Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>;
+        readonly severity: Schema.Literals<readonly ["warning", "blocking"]>;
+        readonly message: Schema.String;
+        readonly actorId: Schema.optionalKey<Schema.String>;
+        readonly target: Schema.optionalKey<Schema.Struct<{
+            readonly type: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+            readonly id: Schema.optionalKey<Schema.String>;
+            readonly scopeType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"workspace">, Schema.Literal<"project">, Schema.Literal<"task">, Schema.Literal<"kit">]>>;
+            readonly scopeId: Schema.optionalKey<Schema.String>;
+        }>>;
+        readonly metadata: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    }>>;
+    readonly approvalPolicy: Schema.Struct<{
+        readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+        readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+        readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+        readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+    }>;
+}>;
+export declare const Proposal: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly workspaceId: Schema.String;
+    readonly projectId: Schema.optionalKey<Schema.String>;
+    readonly taskId: Schema.optionalKey<Schema.String>;
+    readonly target: Schema.Struct<{
+        readonly type: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+        readonly id: Schema.optionalKey<Schema.String>;
+        readonly scopeType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"workspace">, Schema.Literal<"project">, Schema.Literal<"task">, Schema.Literal<"kit">]>>;
+        readonly scopeId: Schema.optionalKey<Schema.String>;
+    }>;
+    readonly title: Schema.String;
+    readonly summary: Schema.String;
+    readonly status: Schema.Literals<readonly ["proposed", "in_review", "approved", "rejected", "applied", "reverted", "superseded", "canceled"]>;
+    readonly riskLevel: Schema.Literals<readonly ["low", "medium", "high"]>;
+    readonly approvalPolicy: Schema.Struct<{
+        readonly mode: Schema.Literals<readonly ["auto_approve_low_risk", "require_other_project_member", "require_workspace_owner_or_admin"]>;
+        readonly requireDifferentApprover: Schema.optionalKey<Schema.Boolean>;
+        readonly autonomousAgentApprovalAllowed: Schema.Literal<false>;
+        readonly deniedViolationCodes: Schema.$Array<Schema.Literals<readonly ["autonomous_self_approval", "self_capability_escalation", "missing_required_approval", "unsafe_payload", "target_conflict"]>>;
+    }>;
+    readonly proposedByActorType: Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>;
+    readonly proposedByActorId: Schema.String;
+    readonly delegatedByUserId: Schema.optionalKey<Schema.String>;
+    readonly createdAt: Schema.String;
+    readonly updatedAt: Schema.String;
+}>;
+export declare const ProposalRevision: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly proposalId: Schema.String;
+    readonly revisionNumber: Schema.Int;
+    readonly payload: Schema.Struct<{
+        readonly memory: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_source: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_version: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_installation: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_activation: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly kit_trust_policy: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly agent_environment_policy: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly decision: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly task: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly project_context: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+        readonly context_relevance: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    }>;
+    readonly renderedDiff: Schema.Struct<{
+        readonly format: Schema.Literals<readonly ["summary", "field_diff", "markdown"]>;
+        readonly title: Schema.String;
+        readonly summary: Schema.String;
+        readonly sections: Schema.$Array<Schema.Struct<{
+            readonly title: Schema.String;
+            readonly beforeSummary: Schema.optionalKey<Schema.String>;
+            readonly afterSummary: Schema.optionalKey<Schema.String>;
+            readonly risk: Schema.Literals<readonly ["low", "medium", "high"]>;
+        }>>;
+        readonly refs: Schema.$Array<Schema.Struct<{
+            readonly kind: Schema.Literals<readonly ["memory", "kit", "loop", "agent", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy", "session", "step_attempt", "change_request"]>;
+            readonly id: Schema.optionalKey<Schema.String>;
+            readonly externalId: Schema.optionalKey<Schema.String>;
+            readonly url: Schema.optionalKey<Schema.String>;
+            readonly title: Schema.optionalKey<Schema.String>;
+        }>>;
+    }>;
+    readonly riskSummary: Schema.Struct<{
+        readonly level: Schema.Literals<readonly ["low", "medium", "high"]>;
+        readonly summary: Schema.String;
+        readonly reasons: Schema.$Array<Schema.String>;
+    }>;
+    readonly createdByActorType: Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>;
+    readonly createdByActorId: Schema.String;
+    readonly createdAt: Schema.String;
+}>;
+export declare const ProposalCommentAnchor: Schema.Struct<{
+    readonly path: Schema.$Array<Schema.String>;
+    readonly label: Schema.optionalKey<Schema.String>;
+}>;
+export declare const ProposalComment: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly proposalId: Schema.String;
+    readonly revisionId: Schema.optionalKey<Schema.String>;
+    readonly body: Schema.String;
+    readonly anchor: Schema.optionalKey<Schema.Struct<{
+        readonly path: Schema.$Array<Schema.String>;
+        readonly label: Schema.optionalKey<Schema.String>;
+    }>>;
+    readonly actorType: Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>;
+    readonly actorId: Schema.String;
+    readonly delegatedByUserId: Schema.optionalKey<Schema.String>;
+    readonly createdAt: Schema.String;
+}>;
+export declare const ProposalCheck: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly proposalId: Schema.String;
+    readonly revisionId: Schema.optionalKey<Schema.String>;
+    readonly kind: Schema.Literals<readonly ["schema", "policy", "preflight", "conflict", "safety"]>;
+    readonly status: Schema.Literals<readonly ["pending", "passed", "failed", "warning", "skipped"]>;
+    readonly summary: Schema.String;
+    readonly details: Schema.optionalKey<Schema.$Record<Schema.String, Schema.Union<readonly [Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>, Schema.$Array<Schema.Union<readonly [Schema.String, Schema.Finite, Schema.Boolean, Schema.Null]>>]>>>;
+    readonly createdAt: Schema.String;
+}>;
+export declare const ProposalApplication: Schema.Struct<{
+    readonly id: Schema.String;
+    readonly proposalId: Schema.String;
+    readonly revisionId: Schema.String;
+    readonly action: Schema.Literals<readonly ["applied", "rejected", "reverted"]>;
+    readonly target: Schema.Struct<{
+        readonly type: Schema.Literals<readonly ["memory", "kit", "agent_environment_policy", "decision", "task", "project_context", "context_relevance", "kit_source", "kit_version", "kit_installation", "kit_activation", "kit_trust_policy"]>;
+        readonly id: Schema.optionalKey<Schema.String>;
+        readonly scopeType: Schema.optionalKey<Schema.Union<readonly [Schema.Literal<"workspace">, Schema.Literal<"project">, Schema.Literal<"task">, Schema.Literal<"kit">]>>;
+        readonly scopeId: Schema.optionalKey<Schema.String>;
+    }>;
+    readonly appliedByActorType: Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>;
+    readonly appliedByActorId: Schema.String;
+    readonly targetVersionBefore: Schema.optionalKey<Schema.String>;
+    readonly targetVersionAfter: Schema.optionalKey<Schema.String>;
+    readonly rollbackRef: Schema.optionalKey<Schema.String>;
+    readonly appliedAt: Schema.String;
+}>;
+export declare function findForbiddenProposalPayloadPath<ValueType>(value: ValueType, path?: readonly string[]): readonly string[] | undefined;
+export declare function isKitMarketplaceProposalTargetType(value: ProposalTargetType): value is (typeof KitMarketplaceProposalTargetTypes)[number];
+export declare function validateKitMarketplaceProposalReview(input: {
+    readonly action: (typeof KitMarketplaceProposalActions)[number];
+    readonly target: ProposalTargetRef;
+    readonly payload: ProposalPayload;
+    readonly renderedDiff: ProposalRenderedDiff;
+    readonly riskSummary: ProposalRiskSummary;
+    readonly proposedByActorId?: string;
+    readonly approvingActorId?: string;
+}): ProposalPolicyViolation[];
+export type ProposalStatus = (typeof ProposalStatus)['Type'];
+export type ProposalTargetType = (typeof ProposalTargetType)['Type'];
+export type ProposalRiskLevel = (typeof ProposalRiskLevel)['Type'];
+export type ProposalCheckKind = (typeof ProposalCheckKind)['Type'];
+export type ProposalCheckStatus = (typeof ProposalCheckStatus)['Type'];
+export type ProposalApplicationAction = (typeof ProposalApplicationAction)['Type'];
+export type ProposalPayload = (typeof ProposalPayload)['Type'];
+export type ProposalSafeMetadata = (typeof ProposalSafeMetadata)['Type'];
+export type ProposalTargetRef = (typeof ProposalTargetRef)['Type'];
+export type ProposalApprovalPolicy = (typeof ProposalApprovalPolicy)['Type'];
+export type ProposalPolicyViolation = (typeof ProposalPolicyViolation)['Type'];
+export type ProposalRenderedDiff = (typeof ProposalRenderedDiff)['Type'];
+export type ProposalRiskSummary = (typeof ProposalRiskSummary)['Type'];
+export type KitMarketplaceProposalReview = (typeof KitMarketplaceProposalReview)['Type'];
+export type Proposal = (typeof Proposal)['Type'];
+export type ProposalRevision = (typeof ProposalRevision)['Type'];
+export type ProposalCommentAnchor = (typeof ProposalCommentAnchor)['Type'];
+export type ProposalComment = (typeof ProposalComment)['Type'];
+export type ProposalCheck = (typeof ProposalCheck)['Type'];
+export type ProposalApplication = (typeof ProposalApplication)['Type'];

package/types/packages/core/src/redaction.d.ts

@@ -0,0 +1,73 @@
+import * as Schema from 'effect/Schema';
+import type { JsonValue } from './runtime-type';
+declare const DurableSurfaceContractVersion: 'durable-redaction.v1';
+export declare const RedactionClassifications: readonly ['secret', 'credential', 'pii', 'source', 'log', 'diff', 'transcript', 'provider_payload', 'url', 'path', 'unknown'];
+type RedactionClassification = (typeof RedactionClassifications)[number];
+declare const RedactionFindingSchema: Schema.Struct<{
+    readonly path: Schema.String;
+    readonly classification: Schema.Union<readonly [Schema.Literal<"secret">, Schema.Literal<"credential">, Schema.Literal<"pii">, Schema.Literal<"source">, Schema.Literal<"log">, Schema.Literal<"diff">, Schema.Literal<"transcript">, Schema.Literal<"provider_payload">, Schema.Literal<"url">, Schema.Literal<"path">, Schema.Literal<"unknown">]>;
+    readonly rule: Schema.String;
+    readonly preview: Schema.String;
+    readonly sha256: Schema.String;
+}>;
+export type RedactionFinding = (typeof RedactionFindingSchema)['Type'];
+export declare const EvidenceRef: Schema.Struct<{
+    readonly contractVersion: Schema.Literal<"evidence-ref.v1">;
+    readonly kind: Schema.String;
+    readonly summary: Schema.String;
+    readonly sha256: Schema.String;
+    readonly redaction: Schema.Literal<"redacted">;
+    readonly findingCount: Schema.Int;
+    readonly classifications: Schema.$Array<Schema.Union<readonly [Schema.Literal<"secret">, Schema.Literal<"credential">, Schema.Literal<"pii">, Schema.Literal<"source">, Schema.Literal<"log">, Schema.Literal<"diff">, Schema.Literal<"transcript">, Schema.Literal<"provider_payload">, Schema.Literal<"url">, Schema.Literal<"path">, Schema.Literal<"unknown">]>>;
+}>;
+export type EvidenceRef = (typeof EvidenceRef)['Type'];
+declare const RedactionSurfaceKinds: readonly ['api', 'mcp', 'cli', 'web', 'event', 'log', 'evidence', 'export'];
+export declare const RedactionSurfaceKindSchema: Schema.Literals<readonly ["api", "mcp", "cli", "web", "event", "log", "evidence", "export"]>;
+export type RedactionSurfaceKind = (typeof RedactionSurfaceKinds)[number];
+export declare const RedactionWaiver: Schema.Struct<{
+    readonly contractVersion: Schema.Literal<"redaction-waiver.v1">;
+    readonly id: Schema.String;
+    readonly workspaceId: Schema.String;
+    readonly findingId: Schema.String;
+    readonly reason: Schema.String;
+    readonly authorityActorType: Schema.Union<readonly [Schema.Literal<"human">, Schema.Literal<"delegated_agent">, Schema.Literal<"agent">]>;
+    readonly authorityActorId: Schema.String;
+    readonly authorityRole: Schema.Union<readonly [Schema.Literal<"owner">, Schema.Literal<"admin">]>;
+    readonly expiresAt: Schema.optionalKey<Schema.String>;
+    readonly createdAt: Schema.String;
+}>;
+export type RedactionWaiver = (typeof RedactionWaiver)['Type'];
+export declare function assertRedactionWaiverAuthority(role: string | undefined): asserts role is 'owner' | 'admin';
+export type DurableSurfaceScan = {
+    readonly contractVersion: typeof DurableSurfaceContractVersion;
+    readonly clean: boolean;
+    readonly findings: readonly RedactionFinding[];
+    readonly unknownFindings: readonly RedactionFinding[];
+};
+type RedactedDurableSurface = {
+    readonly value: JsonValue;
+    readonly findings: readonly RedactionFinding[];
+    readonly scan: DurableSurfaceScan;
+};
+declare const DurableSurfaceScanError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "DurableSurfaceScanError";
+} & Readonly<A>;
+export declare class DurableSurfaceScanError extends DurableSurfaceScanError_base<{
+    readonly message: string;
+    readonly findings: readonly RedactionFinding[];
+}> {
+    constructor(findings: readonly RedactionFinding[]);
+}
+export declare function classifyDurableSurfaceValue<ValueType>(key: string, value: ValueType, options?: DurableSurfaceScanOptions): RedactionClassification | undefined;
+export type DurableSurfaceScanOptions = {
+    readonly allowCanonicalIds?: boolean;
+    /** Lets text cite plain https links, as an agent's Output does. */
+    readonly allowPlainUrls?: boolean;
+};
+export declare function scanDurableSurface<ValueType>(value: ValueType, path?: string, options?: DurableSurfaceScanOptions): DurableSurfaceScan;
+export declare function assertDurableSurfaceClean<ValueType>(value: ValueType, path?: string): void;
+export declare function redactDurableSurface<ValueType>(value: ValueType, path?: string): RedactedDurableSurface;
+export declare function sha256Hex(input: string): string;
+/** The last `maxChars` of command output, with secrets and credentials replaced; other content stays readable. */
+export declare function redactedOutputTail(output: string, maxChars?: number): string;
+export {};